Which of the following BEST facilitates an information security manager's efforts to obtain senior management commitment for an information security program?

• A.Reporting the security maturity level
• B.Presenting compliance requirements
• C.Communicating the residual risk
• D.Presenting evidence of inherent risk

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST enables an information security manager to determine the comprehensiveness of an organization's information security strategy?

• A.Internal security audit
• B.External security audit
• C.Organizational risk appetite
• D.Business impact analysis (BIA)

Comment: *

Name: *

Email: *

Verification: *

When investigating an information security incident, details of the incident should be shared:

• A.only with management.
• B.widely to demonstrate positive intent.
• C.only with internal audit.
• D.only as needed,

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to obtain support for a new organization-wide information security program?

• A.Benchmark against similar industry organizations
• B.Deliver an information security awareness campaign.
• C.Publish an information security RACI chart.
• D.Establish an information security strategy committee.

Comment: *

Name: *

Email: *

Verification: *

An organization is increasingly using Software as a Service (SaaS) to replace in-house hosting and support of IT applications. Which of the following would be the MOST effective way to help ensure procurement decisions consider information security concerns?

• A.Integrate information security risk assessments into the procurement process.
• B.Invite IT members into regular procurement team meetings to influence best practice.
• C.Enforce the right to audit in procurement contracts with SaaS vendors.
• D.Provide regular information security training to the procurement team.

Comment: *

Name: *

Email: *

Verification: *